A critical security vulnerability, identified as CVE-2025-8292, has been discovered in Google Chrome's Media Stream component. This "use after free" flaw allows remote attackers to exploit heap corruption through specially crafted HTML pages, potentially leading to arbitrary code execution. The vulnerability affects Chrome versions prior to 138.0.7204.183.
The National Vulnerability Database (NVD) has classified this issue under CWE-416, which pertains to the use of memory after it has been freed. Such vulnerabilities can result in various malicious activities, including unauthorized system access and malware installation.
Google has addressed this vulnerability in Chrome version 138.0.7204.183. Users are strongly advised to update their browsers to this latest version to mitigate potential risks.
Microsoft Edge, which is based on the Chromium engine, has also incorporated the necessary patches to resolve this issue. Users of Edge should ensure their browsers are updated to the latest version to maintain security.
To protect against potential exploits, users should:
Source: MSRC Security Update Guide - Microsoft Security Response Center
The National Vulnerability Database (NVD) has classified this issue under CWE-416, which pertains to the use of memory after it has been freed. Such vulnerabilities can result in various malicious activities, including unauthorized system access and malware installation.
Google has addressed this vulnerability in Chrome version 138.0.7204.183. Users are strongly advised to update their browsers to this latest version to mitigate potential risks.
Microsoft Edge, which is based on the Chromium engine, has also incorporated the necessary patches to resolve this issue. Users of Edge should ensure their browsers are updated to the latest version to maintain security.
To protect against potential exploits, users should:
- Update their browsers to the latest versions.
- Enable automatic updates to receive future security patches promptly.
- Be cautious when visiting untrusted websites or opening unfamiliar links.
Source: MSRC Security Update Guide - Microsoft Security Response Center
